Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
File:                     WC8uFTMWTruNhxz28sSaVn6iZjU.mft (raw, json)
Hash identifier:          MLlTOViJVLaY2VLQLwDxkRm7u0gk5exTHiCzrV5BCtM=
Subject key identifier:   4D:E8:D6:8C:66:89:AE:76:AC:A7:2F:47:07:13:57:F0:45:10:15:95
Authority key identifier: 58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35
Certificate issuer:       /CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
Certificate serial:       01984AAF1CC40492DF38310A5C5B209FC0E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
Manifest number:          0D20
Signing time:             Sun 27 Jul 2025 07:00:46 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:46 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:46 +0000
Files and hashes:         1: WC8uFTMWTruNhxz28sSaVn6iZjU.crl (hash: g88f+i0HxtLwNyDgte1hsP6fkUk4S3+8WWLmB/HSDF4=)
                          2: Z3Q1WvhVYQp6sTYJIGKzU8X4Hic.roa (hash: bVLYhkF2BtQwTz9AAyN5WatAhOO7gcaRPVhwXWE9H14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:1c:c4:04:92:df:38:31:0a:5c:5b:20:9f:c0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
        Validity
            Not Before: Jul 27 07:00:46 2025 GMT
            Not After : Jul 28 07:00:46 2025 GMT
        Subject: CN=4de8d68c6689ae76aca72f47071357f045101595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9f:db:fa:b4:9d:ce:b0:42:fc:0f:31:c7:d1:
                    b5:e6:33:28:b0:31:d0:ad:81:59:03:8e:05:21:83:
                    f7:56:45:73:39:58:89:77:2a:de:28:94:74:9b:be:
                    45:95:eb:d1:31:1c:f0:70:fa:c5:66:36:83:ec:b8:
                    c5:62:32:b5:09:75:ad:0c:dd:b4:ac:ca:00:72:87:
                    c2:88:f6:af:79:a4:7e:e6:7f:89:33:37:d9:6b:0b:
                    f3:05:30:42:2f:81:2b:42:7c:17:16:3a:f3:14:3b:
                    f9:23:b1:47:77:9a:3b:17:10:f6:da:2b:0f:ad:a2:
                    8c:53:b4:08:95:f6:48:12:73:a3:cb:c4:d0:f5:ed:
                    a3:47:56:e7:8a:fb:91:e7:b0:39:87:41:6c:1a:6f:
                    76:20:5c:69:b9:56:80:ed:9e:ed:8f:31:c7:00:e5:
                    cb:af:d3:b7:46:f5:d9:a3:6f:90:9a:14:41:e6:6f:
                    c8:05:19:81:c3:cd:c3:3b:ee:8c:06:9e:0c:c4:0c:
                    97:88:24:70:4c:82:bb:c8:55:15:fd:99:c5:c7:29:
                    4f:6e:8e:d9:43:3f:78:26:0e:4d:5d:77:7d:f5:9b:
                    c8:34:ac:a2:3e:0c:8e:51:dd:39:49:6e:ee:8f:ef:
                    49:38:3f:de:55:b3:e2:46:63:1c:97:ea:3b:22:b7:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E8:D6:8C:66:89:AE:76:AC:A7:2F:47:07:13:57:F0:45:10:15:95
            X509v3 Authority Key Identifier:
                keyid:58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:13:d5:ab:48:b2:40:2c:31:91:1c:b0:3d:a5:36:e5:0b:e5:
         c0:cb:b5:7d:70:3e:75:c8:bb:40:c4:ab:79:c6:45:92:f1:a8:
         d6:85:1e:41:ab:a6:76:59:35:85:db:36:a1:3e:95:f6:1b:56:
         da:df:df:e2:36:24:69:35:c9:66:8c:e0:a4:29:93:6e:2b:3f:
         c1:91:59:fe:ad:a1:51:bc:fb:d9:e9:8c:39:dd:b7:eb:4e:85:
         f4:dc:70:a9:ce:3c:15:14:cc:58:cf:c6:01:40:dc:6f:29:ae:
         9d:c7:40:f1:93:ca:a3:4e:cb:14:4f:85:52:7e:e6:76:90:a1:
         fc:93:f2:6c:0d:8a:92:84:e8:0d:07:31:4b:eb:8f:73:16:73:
         7e:6f:46:93:08:84:45:7b:de:1d:71:e7:bf:4f:49:97:6b:b1:
         4d:a8:60:67:6f:57:5c:ba:1d:84:ad:60:70:45:4d:9c:97:97:
         c7:62:29:f7:c3:9d:9a:f8:5d:b2:37:27:69:d7:57:a0:4c:94:
         d0:9f:b8:ef:2e:e0:32:21:b9:51:23:96:3b:7d:38:2d:56:94:
         5f:fe:a5:20:a9:93:12:e4:1f:b8:b8:f5:7f:8a:4b:d4:6f:f5:
         97:52:f3:0e:b0:a1:c7:17:dd:c8:6d:f6:c8:3b:27:94:ac:82:
         75:c9:09:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:14:50 2025 by rpki-client